{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "A new version of OpenShift API for Data Protection (OADP) 1.4.12 is now available.", "title": "Topic" }, { "category": "general", "text": "OpenShift API for Data Protection (OADP) 1.4.12 enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:94498", "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-27145", "url": "https://access.redhat.com/security/cve/CVE-2026-27145" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-32283", "url": "https://access.redhat.com/security/cve/CVE-2026-32283" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33818", "url": "https://access.redhat.com/security/cve/CVE-2026-33818" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-39821", "url": "https://access.redhat.com/security/cve/CVE-2026-39821" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-39833", "url": "https://access.redhat.com/security/cve/CVE-2026-39833" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-39834", "url": "https://access.redhat.com/security/cve/CVE-2026-39834" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-41178", "url": "https://access.redhat.com/security/cve/CVE-2026-41178" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-42504", "url": "https://access.redhat.com/security/cve/CVE-2026-42504" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-56852", "url": "https://access.redhat.com/security/cve/CVE-2026-56852" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-56853", "url": "https://access.redhat.com/security/cve/CVE-2026-56853" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-56858", "url": "https://access.redhat.com/security/cve/CVE-2026-56858" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-56859", "url": "https://access.redhat.com/security/cve/CVE-2026-56859" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-56860", "url": "https://access.redhat.com/security/cve/CVE-2026-56860" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-56862", "url": "https://access.redhat.com/security/cve/CVE-2026-56862" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-63209", "url": "https://access.redhat.com/security/cve/CVE-2026-63209" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-84445", "url": "https://access.redhat.com/security/cve/CVE-2026-84445" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94498.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection - 1.4.12", "tracking": { "current_release_date": "2026-11-04T14:12:43+00:00", "generator": { "date": "2026-11-04T14:12:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.4.4" } }, "id": "RHSA-2026:94498", "initial_release_date": "2026-11-03T10:44:09+00:00", "revision_history": [ { "date": "2026-11-03T10:44:09+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-11-03T10:44:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-11-04T14:12:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift API for Data Protection 1.4", "product": { "name": "OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_api_data_protection:1.4::el9" } } } ], "category": "product_family", "name": "OpenShift API for Data Protection" }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Ae28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9&tag=1793132047" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Ac12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9&tag=1793124597" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ae945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9&tag=1793124243" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-rhel9-operator@sha256%3A5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-rhel9-operator&tag=1793138820" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-operator-bundle@sha256%3A46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-operator-bundle&tag=1793139718" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Aca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-rhel9&tag=1793124668" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Accb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9&tag=1793138842" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Abaa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9&tag=1793124577" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9&tag=1793124191" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9&tag=1793124508" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Aab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9&tag=1793124026" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c?arch=amd64&repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9&tag=1793124532" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9&tag=1793132047" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9&tag=1793124597" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Abac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9&tag=1793124243" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ac993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-rhel9-operator&tag=1793138820" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-rhel9@sha256%3A4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-rhel9&tag=1793124668" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9&tag=1793138842" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9&tag=1793124577" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9&tag=1793124191" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9&tag=1793124508" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9&tag=1793124026" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "product": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Ab6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4?arch=arm64&repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9&tag=1793124532" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9&tag=1793132047" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9&tag=1793124597" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Af727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9&tag=1793124243" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Afdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-rhel9-operator&tag=1793138820" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ae43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-rhel9&tag=1793124668" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Ad5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9&tag=1793138842" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aa1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9&tag=1793124577" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9&tag=1793124191" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Adc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9&tag=1793124508" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9&tag=1793124026" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "product": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791?arch=ppc64le&repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9&tag=1793124532" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9&tag=1793132047" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Aead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9&tag=1793124597" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9&tag=1793124243" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Af88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-rhel9-operator&tag=1793138820" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Aa1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-rhel9&tag=1793124668" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9&tag=1793138842" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9&tag=1793124577" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Abaf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9&tag=1793124191" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9&tag=1793124508" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9&tag=1793124026" } } }, { "category": "product_version", "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "product": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "product_identification_helper": { "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed?arch=s390x&repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9&tag=1793124532" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64 as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le as a component of OpenShift API for Data Protection 1.4", "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" }, "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le", "relates_to_product_reference": "OpenShift API for Data Protection 1.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27145", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "discovery_date": "2026-06-02T23:01:08.992540+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2484207" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "title": "Vulnerability summary" }, { "category": "other", "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-27145" }, { "category": "external", "summary": "RHBZ#2484207", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145" }, { "category": "external", "summary": "https://go.dev/cl/783621", "url": "https://go.dev/cl/783621" }, { "category": "external", "summary": "https://go.dev/issue/79694", "url": "https://go.dev/issue/79694" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5037", "url": "https://pkg.go.dev/vuln/GO-2026-5037" } ], "release_date": "2026-06-02T22:01:36.954000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries" }, { "cve": "CVE-2026-32283", "cwe": { "id": "CWE-764", "name": "Multiple Locks of a Critical Resource" }, "discovery_date": "2026-04-08T02:01:16.213799+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2456338" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "title": "Vulnerability summary" }, { "category": "other", "text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-32283" }, { "category": "external", "summary": "RHBZ#2456338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283", "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283" }, { "category": "external", "summary": "https://go.dev/cl/763767", "url": "https://go.dev/cl/763767" }, { "category": "external", "summary": "https://go.dev/issue/78334", "url": "https://go.dev/issue/78334" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4870", "url": "https://pkg.go.dev/vuln/GO-2026-4870" } ], "release_date": "2026-04-08T01:06:57.670000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages" }, { "cve": "CVE-2026-33818", "cwe": { "id": "CWE-776", "name": "Improper Restriction of Recursive Entity References in DTDs" }, "discovery_date": "2026-08-13T22:12:37.151735+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2515815" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.", "title": "Vulnerability description" }, { "category": "summary", "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33818" }, { "category": "external", "summary": "RHBZ#2515815", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818" }, { "category": "external", "summary": "https://go.dev/cl/814980", "url": "https://go.dev/cl/814980" }, { "category": "external", "summary": "https://go.dev/issue/80405", "url": "https://go.dev/issue/80405" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5972", "url": "https://pkg.go.dev/vuln/GO-2026-5972" } ], "release_date": "2026-08-13T21:58:52.821000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal" }, { "cve": "CVE-2026-39821", "cwe": { "id": "CWE-1289", "name": "Improper Validation of Unsafe Equivalence in Input" }, "discovery_date": "2026-05-22T16:00:52.844126+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2480756" } ], "notes": [ { "category": "description", "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "title": "Vulnerability summary" }, { "category": "other", "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-39821" }, { "category": "external", "summary": "RHBZ#2480756", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821" }, { "category": "external", "summary": "https://go.dev/cl/767220", "url": "https://go.dev/cl/767220" }, { "category": "external", "summary": "https://go.dev/issue/78760", "url": "https://go.dev/issue/78760" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8", "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5026", "url": "https://pkg.go.dev/vuln/GO-2026-5026" } ], "release_date": "2026-05-22T15:01:21.462000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing" }, { "cve": "CVE-2026-39833", "cwe": { "id": "CWE-358", "name": "Improperly Implemented Security Check for Standard" }, "discovery_date": "2026-05-22T04:01:35.714593+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2480683" } ], "notes": [ { "category": "description", "text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-39833" }, { "category": "external", "summary": "RHBZ#2480683", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39833" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833" }, { "category": "external", "summary": "https://go.dev/cl/778640", "url": "https://go.dev/cl/778640" }, { "category": "external", "summary": "https://go.dev/cl/778641", "url": "https://go.dev/cl/778641" }, { "category": "external", "summary": "https://go.dev/issue/79436", "url": "https://go.dev/issue/79436" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5005", "url": "https://pkg.go.dev/vuln/GO-2026-5005" } ], "release_date": "2026-05-22T02:31:26.294000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation" }, { "cve": "CVE-2026-39834", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2026-05-22T04:01:15.681060+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2480676" } ], "notes": [ { "category": "description", "text": "A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is rated as having a Moderate impact because triggering the condition requires transmitting an unchunked payload exceeding 4GB in a single operation across an SSH channel, which represents an atypical pattern in standard deployments. In typical Red Hat environments and containerized applications consuming this Go package, network communications and data transfers are handled in significantly smaller buffers, substantially limiting realistic exposure. In the event of exploitation, the blast radius is restricted to process hang and denial of service via an infinite loop, without compromising system confidentiality or data integrity.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-39834" }, { "category": "external", "summary": "RHBZ#2480676", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480676" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39834", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39834" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834" }, { "category": "external", "summary": "https://go.dev/cl/781663", "url": "https://go.dev/cl/781663" }, { "category": "external", "summary": "https://go.dev/issue/79567", "url": "https://go.dev/issue/79567" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI", "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5020", "url": "https://pkg.go.dev/vuln/GO-2026-5020" } ], "release_date": "2026-05-22T02:31:27.540000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write" }, { "cve": "CVE-2026-41178", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2026-06-04T16:01:10.300537+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2484830" } ], "notes": [ { "category": "description", "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.", "title": "Vulnerability description" }, { "category": "summary", "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-41178" }, { "category": "external", "summary": "RHBZ#2484830", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178" }, { "category": "external", "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880", "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880" }, { "category": "external", "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835", "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835" } ], "release_date": "2026-06-04T14:38:23.707000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers" }, { "cve": "CVE-2026-42504", "cwe": { "id": "CWE-1050", "name": "Excessive Platform Resource Consumption within a Loop" }, "discovery_date": "2026-06-02T23:01:00.320527+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2484204" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.", "title": "Vulnerability description" }, { "category": "summary", "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "title": "Vulnerability summary" }, { "category": "other", "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-42504" }, { "category": "external", "summary": "RHBZ#2484204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504" }, { "category": "external", "summary": "https://go.dev/cl/774481", "url": "https://go.dev/cl/774481" }, { "category": "external", "summary": "https://go.dev/issue/79217", "url": "https://go.dev/issue/79217" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5038", "url": "https://pkg.go.dev/vuln/GO-2026-5038" } ], "release_date": "2026-06-02T22:01:37.219000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header" }, { "cve": "CVE-2026-56852", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition" }, "discovery_date": "2026-07-21T20:01:56.266823+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2504233" } ], "notes": [ { "category": "description", "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input", "title": "Vulnerability summary" }, { "category": "other", "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-56852" }, { "category": "external", "summary": "RHBZ#2504233", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852" }, { "category": "external", "summary": "https://go.dev/cl/794100", "url": "https://go.dev/cl/794100" }, { "category": "external", "summary": "https://go.dev/issue/80142", "url": "https://go.dev/issue/80142" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5970", "url": "https://pkg.go.dev/vuln/GO-2026-5970" } ], "release_date": "2026-07-21T19:18:59.951000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input" }, { "cve": "CVE-2026-56853", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2026-08-13T22:14:53.561638+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2515827" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.", "title": "Vulnerability description" }, { "category": "summary", "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "title": "Vulnerability summary" }, { "category": "other", "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-56853" }, { "category": "external", "summary": "RHBZ#2515827", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853" }, { "category": "external", "summary": "https://go.dev/cl/795540", "url": "https://go.dev/cl/795540" }, { "category": "external", "summary": "https://go.dev/issue/80205", "url": "https://go.dev/issue/80205" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-6089", "url": "https://pkg.go.dev/vuln/GO-2026-6089" } ], "release_date": "2026-08-13T21:58:53.092000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service" }, { "cve": "CVE-2026-56858", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation" }, "discovery_date": "2026-08-13T22:16:32.034590+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2515838" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.", "title": "Vulnerability description" }, { "category": "summary", "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-56858" }, { "category": "external", "summary": "RHBZ#2515838", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858" }, { "category": "external", "summary": "https://go.dev/cl/807100", "url": "https://go.dev/cl/807100" }, { "category": "external", "summary": "https://go.dev/issue/80435", "url": "https://go.dev/issue/80435" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-6091", "url": "https://pkg.go.dev/vuln/GO-2026-6091" } ], "release_date": "2026-08-13T21:58:53.354000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input" }, { "cve": "CVE-2026-56859", "cwe": { "id": "CWE-776", "name": "Improper Restriction of Recursive Entity References in DTDs" }, "discovery_date": "2026-08-13T22:16:52.493058+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2515840" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.", "title": "Vulnerability description" }, { "category": "summary", "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "title": "Vulnerability summary" }, { "category": "other", "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-56859" }, { "category": "external", "summary": "RHBZ#2515840", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859" }, { "category": "external", "summary": "https://go.dev/cl/803320", "url": "https://go.dev/cl/803320" }, { "category": "external", "summary": "https://go.dev/issue/80481", "url": "https://go.dev/issue/80481" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-6088", "url": "https://pkg.go.dev/vuln/GO-2026-6088" } ], "release_date": "2026-08-13T21:58:52.959000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue" }, { "cve": "CVE-2026-56860", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2026-08-13T22:13:18.319384+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2515820" } ], "notes": [ { "category": "description", "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.", "title": "Vulnerability description" }, { "category": "summary", "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments ('..') may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-56860" }, { "category": "external", "summary": "RHBZ#2515820", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860" }, { "category": "external", "summary": "https://go.dev/cl/803681", "url": "https://go.dev/cl/803681" }, { "category": "external", "summary": "https://go.dev/issue/80494", "url": "https://go.dev/issue/80494" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-6218", "url": "https://pkg.go.dev/vuln/GO-2026-6218" } ], "release_date": "2026-08-13T21:58:53.731000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution" }, { "cve": "CVE-2026-56862", "cwe": { "id": "CWE-1050", "name": "Excessive Platform Resource Consumption within a Loop" }, "discovery_date": "2026-08-13T22:16:41.928450+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2515839" } ], "notes": [ { "category": "description", "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-56862" }, { "category": "external", "summary": "RHBZ#2515839", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862" }, { "category": "external", "summary": "https://go.dev/cl/804261", "url": "https://go.dev/cl/804261" }, { "category": "external", "summary": "https://go.dev/issue/80528", "url": "https://go.dev/issue/80528" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI", "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-6090", "url": "https://pkg.go.dev/vuln/GO-2026-6090" } ], "release_date": "2026-08-13T21:58:53.216000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages" }, { "cve": "CVE-2026-63209", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "discovery_date": "2026-09-29T15:12:15.658458+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2543236" } ], "notes": [ { "category": "description", "text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-63209" }, { "category": "external", "summary": "RHBZ#2543236", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63209" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209" }, { "category": "external", "summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536", "url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536" }, { "category": "external", "summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7", "url": "https://github.com/klauspost/compress/releases/tag/v1.18.7" }, { "category": "external", "summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw", "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw" } ], "release_date": "2026-09-29T14:58:53.366000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing" }, { "cve": "CVE-2026-84445", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2026-09-14T16:22:17.356407+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2533175" } ], "notes": [ { "category": "description", "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.", "title": "Vulnerability description" }, { "category": "summary", "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "known_not_affected": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-84445" }, { "category": "external", "summary": "RHBZ#2533175", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7", "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4", "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f", "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/issues/9354", "url": "https://github.com/grpc/grpc-go/issues/9354" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/pull/9365", "url": "https://github.com/grpc/grpc-go/pull/9365" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/pull/9366", "url": "https://github.com/grpc/grpc-go/pull/9366" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/pull/9367", "url": "https://github.com/grpc/grpc-go/pull/9367" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2", "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2", "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2" }, { "category": "external", "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj", "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj" } ], "release_date": "2026-09-14T16:11:41.401000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-11-03T10:44:09+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor Red Hat OpenShift API for Data Protection 1.4, see the following documentation for instructions on how to apply this update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore", "product_ids": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:94498" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:46c3d624dd4a3ed042d276b7e100ccc2285413ac48f9c2d2edbb481bf387afdd_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:54e78c40665d889717356c4571d82382813805f0ce4c216a34002672b250f0d8_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:8ca1f5a2db5ada72befb5f44884b42197b1a72a073517e5e5ebd1f458744b792_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e28ebd4bd896563c1423c26878968ee3c99a1e6f41c67475d5042592149ca5b3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:68d20fc71a077f7c916ce1d1be3be77b95fe15d52b004cef645da19e1db24208_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9a1be78faf5f3e3b3b2ca0ae3046bb16e33c3e09a56a5e526651af6f1fb25e9b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:c12bdaa9ba6d23d2a341695c8a02cbfc34a2ec4fb84d78ea7443765c051b6aa1_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ead793e660b44208294442d790d0eb3f10d1971fa48ac7de45d061df1665cc07_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:8d142c301f09d8525dade17d1aa4a6edf51da114eb5cbf9d41ea37e615b8084e_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:bac32876890402198742f69129a1b0c1c2f0b569f2abf6517054da0a8678e485_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:e945379471cc591e81d5e6e17a3e6951d01bd48b9cc3e7e49d9bd97e588651ac_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f727863d795401285b3079bd8b82d92a0c3a36198e8f1febc998fd27cc7c8f05_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:46e75dd37cb3f97e630919596a230eb790b50dda8c58c9b5847fbf46060da1bc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5dca08f97661dd55ff70e2691fbdbd21a192555461e7c67c1c6f07569ff3a5bf_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c993e95227252e263b9af7e6dc8a9c752ae1668b60303397c061369b16ff81b0_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f88b08e5193649e4fb210daea6a2703c1ead4ac12d5b2c58e07b8ac1b98fa81c_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:fdb25db819bc5ce3e8e909dc45494f4e5537246ccb18448ceb88a676c2ea3907_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2126e2941ce552017097625d7a61b43e1a754b61eacc0052aafc393b4e8cd383_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7e002a3716099eb23a6b85ef4a20265cea15e75f450df58d841002d477abc1c4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:a1bfc85eb744987c65fe87820821a6a1b8706f51f02ba9109ebd5069f5ac625b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:baa65d74035f053bc90cea7c19f3cf44e1acf8db92793cdf0824c28ef9f094d3_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:1114f83db3e42886c98dd0272469fdb2396af98ffa8d00776172de97f1745bed_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:16a4d2220e131383c46de39539b56d1cb6ec162a89017d39aa7f06311f26d4c9_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:3384d505fd69d322da94e43eaa7b50832f9e28f9d82fe136b3feb6c63418a593_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:baf079df7b5ee4f67b89c14cc76fa8941cb96c50c01a388e51d6b52ab3eb8291_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3133a1d918703061ee3ec10444a14e7180908bd37ce21c98c4fb4e749d370e6b_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:5edec0b5c9495a0a4f519b6c82fbaceddd3f2ae6ac38b04a1fb87dd08f6542cd_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:7a65e895754c073d390abf53259932248e1d325f9c32d9254bbe659a38dfe14b_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dc597bc7f2194c6c23da93a0dfaebe0dd4ab8ede33cc323c59301be3a19931da_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3b5012d52cf3e4ad64d50598571ca6ca15c734e60096f057fa089401c8f6f543_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:89209fa33db766a179bc845a5e7cb1baf977665d92d4282c4b4a7376baa4788b_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9ded9fd19c7f6cab0b8221bd04f31e0b73375afa92c3a2850ef487986ee56854_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ab51324b9f7b063e022428cf745cbc5d5910087e6c6a8c9734c5d7460882fde9_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5705b139c0afd6c988760ec9f7efd0d1f806f1d4d63b92aac3df9a4f88c824d0_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6ed08e74255e214d6dee7560f12fb8b899961d9902d84d9c58b9a19d448fb516_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:ccb940092d97bed835733141bec070dc9f3c16f56a3f2aa5be4878673ab460f6_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:d5408d5be2cba69a8bd0fee4968b1ac0e7516db7820685cc7099beb6daf7f2be_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1bf62afb656e1e876af9cfec65407109e763fe6cb4256eb329e6272668a30791_ppc64le", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:1f420bd3aa3187bfc78911208b718fbd5a5adb23ed0cba1c3bd646c08cf474ed_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4b2a3a6fc49c9b3e94676c4184a8bfe5c180b0246e5d14974373d8844881dd4c_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:b6ecfacd829ef876959bf2572368ba15f0d2b3cd361c45aa4f6bc9fa20810da4_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4f2a7747e3fedb050fb5e25cbfb55b150b1cffe53f8e7ee9014dc88a984845cf_arm64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:a1a8a72f0b5f312bbe96929311a4a5c511e3886053ef4eafcfcb2334ed518d98_s390x", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ca2ad4f57376edb5f5d6618fa2b3571af473b071e969d0aba542eba6173eeecc_amd64", "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e43e497d82760cddefded521b6544faa66473d3fbc3476a445be8e036508d5b8_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests" } ] }